SourceCodester Sales Tracker Management System view_client.php sql injection

CVE-2023-1290

What is CVE-2023-1290?

A SQL injection vulnerability has been identified in the Sales Tracker Management System 1.0. This flaw resides in the file admin/clients/view_client.php, where improper input validation on the 'id' argument allows attackers to manipulate queries executed by the database. This type of attack can be launched remotely, posing a significant risk to data integrity and confidentiality. The exploit has been publicly disclosed, making it crucial for users of this software to apply security measures and updates promptly.

References